Issued:
2020-08-17
Updated:
2020-08-17

RHSA-2020:3461 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.3.2 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.3.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.3.1, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.2 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API (CVE-2020-10718)
  • dom4j: XML External Entity vulnerability in default SAX parser (CVE-2020-10683)
  • wildfly-elytron: session fixation when using FORM authentication (CVE-2020-10714)
  • wildfly-undertow: Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests (CVE-2020-10687)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10673)
  • hibernate-core: hibernate: SQL injection issue in Hibernate ORM (CVE-2019-14900)
  • wildfly: unsafe deserialization in Wildfly Enterprise Java Beans (CVE-2020-10740)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10672)
  • undertow: EAP: field-name is not parsed in accordance to RFC7230 (CVE-2020-1710)
  • hibernate-validator: Improper input validation in the interpolation of constraint error messages (CVE-2020-10693)
  • wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain (CVE-2020-1748)
  • wildfly: Some EJB transaction objects may get accumulated causing Denial of Service (CVE-2020-14297)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

For details about how to apply this update, see:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.3 for RHEL 6 x86_64

Fixes

  • BZ - 1666499 - CVE-2019-14900 hibernate: SQL injection issue in Hibernate ORM
  • BZ - 1694235 - CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser
  • BZ - 1785049 - CVE-2020-10687 Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests
  • BZ - 1793970 - CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230
  • BZ - 1805501 - CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages
  • BZ - 1807707 - CVE-2020-1748 Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain
  • BZ - 1815470 - CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1815495 - CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1825714 - CVE-2020-10714 wildfly-elytron: session fixation when using FORM authentication
  • BZ - 1828476 - CVE-2020-10718 wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API
  • BZ - 1834512 - CVE-2020-10740 wildfly: unsafe deserialization in Wildfly Enterprise Java Beans
  • BZ - 1853595 - CVE-2020-14297 wildfly: Some EJB transaction objects may get accumulated causing Denial of Service

JBoss Enterprise Application Platform 7.3 for RHEL 6

SRPM
eap7-dom4j-2.1.3-1.redhat_00001.1.el6eap.src.rpm SHA-256: fe24af4a263b7c19546b793cad74e4767e2877cf80e849be5770060bbf7391a5
eap7-elytron-web-1.6.2-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: a7d1ef76ea79e05949698cbacf053057a279b7f62adf68aa68c3b349cdd70769
eap7-glassfish-jsf-2.3.9-11.SP11_redhat_00001.1.el6eap.src.rpm SHA-256: 3d3678628eb3fe29e2aede8732c01910b01f1504213f62c9e1f5439fa66a4853
eap7-hal-console-3.2.9-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 5987e39b04aa917642869cd071d1f2abb213337f13dde7a189f2ae2cb3d6778b
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 118745b68f1e5de406b54fbfa5734b76a78b6e70006c8a1473ccd3433a30826a
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 213811db416d526c882a24ca43b1c4bd38dc8bde01d66c030773f8b3517ab153
eap7-infinispan-9.4.19-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 47ea55a7763cb8a1684376eabeaa4b59c875fa6ff0cab381c15cd74ca945dcd2
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 36d594a0efd2393ce7a22092fa46a18f5380fe1f3822d9e64d5f2611db5299ce
eap7-jackson-annotations-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: 379cd4265d40c551af108c8b1e85e0873c69acd4585931faeec39a1e85f6675e
eap7-jackson-core-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: c026c2bd993b0bde3574bb0d3a47051501a5e578fab33f5e34c4684dd623f4fe
eap7-jackson-databind-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: ae54557649f8cc533c4ccfc9cb7365ee9e19a0b270b864b4cef16151399fac04
eap7-jackson-jaxrs-providers-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: 57b9c0ce66caa40315d9bb978c6bc8424e5824602632fb7acd6fc5a429901b83
eap7-jackson-modules-base-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: acc57a9fe4699e06c50a373206183f473b70159b1b7dbfc9f5f25794417a3465
eap7-jackson-modules-java8-2.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: b10caf22eed96f9f75f95836d63eaf232561025ab9b7da42adf6b540e9149062
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 78449b955ff0c646a4c40baa4de40e75fd3465ae5d47090a2641199b5a831de0
eap7-jboss-jsf-api_2.3_spec-3.0.0-4.SP04_redhat_00001.1.el6eap.src.rpm SHA-256: 06a4e5829de9dbccd2f674a692e68489dfbf8dee248a88182e567b8d02a59676
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 8ab8579f829a0585a817091ad915004530e3ac0d05089a19902ef21e4db6c493
eap7-jboss-server-migration-1.7.1-7.Final_redhat_00009.1.el6eap.src.rpm SHA-256: 327ae8a97d0efaa881adb3b7eb9ecebcf6d38f8e9d058954165476878a4cbfd6
eap7-jboss-xnio-base-3.7.8-1.SP1_redhat_00001.1.el6eap.src.rpm SHA-256: 5bfefad00d2e264c069b1f9757943db2fee8dd9fd4c52c049ecfbf2657a092c2
eap7-netty-4.1.48-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 5d03fc2667da59d0195b985df7b79a03021f7368be6c0184cd0c4be992ff6d69
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el6eap.src.rpm SHA-256: b152f978338a8e4d18093e9f15d57892ffe065e17b74da328320501953e1d7e1
eap7-wildfly-7.3.2-4.GA_redhat_00002.1.el6eap.src.rpm SHA-256: 52afd8422b08b9cb1b09e0b4bba0dfd6c3256f9f98daf359a62d9b0e0b0c9992
eap7-wildfly-common-1.5.2-1.Final_redhat_00002.1.el6eap.src.rpm SHA-256: 48ade422085df75051fd90d5fb704fec63904de904932b6e18265c7a1d321bd3
eap7-wildfly-elytron-1.10.7-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 455c419272218b36ad97793b212fc7345968b37ae114cc8d8fcc3bc2f9fcf691
eap7-wildfly-http-client-1.0.22-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 69a7c9d587b3ccf83fa7794bdf86d93f730541e8c389e29b5fca6d924d1a0e1b
x86_64
eap7-dom4j-2.1.3-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: c6aa9133eef35d9c062c257a1bad4dc7cd61ca1939566cadc5abc02da1d26950
eap7-glassfish-jsf-2.3.9-11.SP11_redhat_00001.1.el6eap.noarch.rpm SHA-256: 8624a02e56137716d94a3aad08f89adc949cdf35a6399fe76a77d529f109c443
eap7-hal-console-3.2.9-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5848ea1d95ab7bcb5a7875320b8963d4be3a6ce3f5dde30c091b82cd0451745e
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 24a72541ba3f582ff25ed7f7fb83c9f50d53a6a2bd2b34420bae06a77e55a343
eap7-hibernate-core-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 1f084618a16694615121786fb578d7cb6c011a0b9bb4bf5279f9704924e086a0
eap7-hibernate-entitymanager-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: fc62d30801b4c911d07545598ad5c31fcdaf60926f74a3859544147ace49a682
eap7-hibernate-envers-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: d79b3d59921c34cfe4bd9e15c07c917194d81dc7d11104849af64239feaf4e3a
eap7-hibernate-java8-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 273abfc3a738ab775fe075fc25713eda3aa6cbbe7bf5ee44bd5a400c854a7aeb
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: e124a69a8da88f35e6c2f49b236047c5ddd66ad48a6fa0c47995ddbfafd10d25
eap7-hibernate-validator-cdi-6.0.20-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5044202964361fec798c0b75fec4fbc67abd0a24e62e69609ae049a1ded29c7f
eap7-infinispan-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 9c58d0a9353e6a3f91758b97c0276a42ae4872942bb73884641917c546270235
eap7-infinispan-cachestore-jdbc-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: de2662a3b4c48883245d6a66b2880ea9582bed7935fa55e2ee002ce1fc5970d0
eap7-infinispan-cachestore-remote-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 38551fba37104b9ce3b306585b879dbc57c1e3cc9e20f9274ab4abee04436eea
eap7-infinispan-client-hotrod-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 861b1d7dbdca639f02c0a1faf14da10846b7aaaee51ccb922d11f228a56e7121
eap7-infinispan-commons-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 26bf38387b4a375602024a815f68ab4f1dcb54fa6aca5dcbae929ac12ab29052
eap7-infinispan-core-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 89f7b6870bcfdad17ea3617cbd80fe13d4bc83a1743348e1739704ce00a55776
eap7-infinispan-hibernate-cache-commons-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: c0d5176dd2d850ce1868864dfbabd3e641add1a8c3e6c2c9bbac483d7edaa124
eap7-infinispan-hibernate-cache-spi-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5587bc96c75d5d8e2bc48c1c5d1bf512d17e03c7af744488488e68d6ebfcb83f
eap7-infinispan-hibernate-cache-v53-9.4.19-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: e96b7830ac5b71ab9eeb125397d31c841d4e2f4f8f34eb15d8846b7ced5e06d9
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 557de3ea80a87d1328914d4cef4fe236379528ac697e41fe87a06d8e1e09362f
eap7-ironjacamar-common-api-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2b3744d59d8e81420686e6eca5768e43f8a6ca3a1d37a1bd3e7027a064d46217
eap7-ironjacamar-common-impl-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a30e3faa71638245563e7d1b5cfcd05ff1f3621b723b47007e50ea180043794c
eap7-ironjacamar-common-spi-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 53935099ff081106f87cbba6a0a2ef5c04c0c43260f74a16077b5817ae8f591a
eap7-ironjacamar-core-api-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: cb57ae6b7b68887471d68e9866a082e80f1a55576bf43da935b2cf1fe02f15ea
eap7-ironjacamar-core-impl-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 116da25f67731ec81b721fb623d28864e81a50431edd809302504138e36e62c9
eap7-ironjacamar-deployers-common-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 0bf53f5c295e1605b07b21f3671979d571734d35b24f638f32aff423554762b5
eap7-ironjacamar-jdbc-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a2f5c7e149819f74876ab9d503b9a2db03f4feeff87cae5644b32ece10218258
eap7-ironjacamar-validator-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a52811f7072a87b1d3454ee43b4477f49a1843bdfed1f97a7b2d3dc9c377f156
eap7-jackson-annotations-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 371e090f280baceb524167f02f1f41f969603e453dd9082ee19627018d35492a
eap7-jackson-core-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 5f9eae0f3d35057d5b881be32c86b7807a6466d1cbd46f8876fe3f2e823e502e
eap7-jackson-databind-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 13b969fb5844b65bb4bae28f7304d51f8b6b9e2d7b221cb552da9655d2ccb2b9
eap7-jackson-datatype-jdk8-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 815f47d1e3c97197b6aabb456880aed73195a26b3a329e98c0b7d11ac4e67c98
eap7-jackson-datatype-jsr310-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: a0fb4e99c1884e10b2b1a417157623f29fb8a7d79f57101dde5721ea36baa8a3
eap7-jackson-jaxrs-base-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 2b79aa3d520095e06e1a7f78aeb4876b480d5d600a0c58494d557540192e526b
eap7-jackson-jaxrs-json-provider-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: a88837d7001a3df99c88d384b4e3e9daf4bb642d138432cbae1904a1f11c2605
eap7-jackson-module-jaxb-annotations-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 5b02cb22fdc48aa609be6684334ebf13789b4a7532a1ff1196516d8cd023cbdd
eap7-jackson-modules-base-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 35e83c71dd7d90b0473472f0b5d72a510c72cd8a57cd0045c5de4bea8aec5520
eap7-jackson-modules-java8-2.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: f8a646279e29b1ffcf7240f19b8c5f1e5998fc87486e03248222b171b89051a9
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: e066108276d642633479bdbd480b254306348248f76d1ecce834d94a6e5ead81
eap7-jboss-jsf-api_2.3_spec-3.0.0-4.SP04_redhat_00001.1.el6eap.noarch.rpm SHA-256: 6f35fbf0eb1e6f5ddc40c671b00c4a659a4d69eae35e34cd67d6071f4789082b
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a41e74838b49497f21a6c000c1c9a0a3c7dc1f8a614504f98e013573ef88e5c0
eap7-jboss-server-migration-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 3c2be8445295fc41d5a0b3c79dfb2a734a82c48c3375dc9468a8b43584badfae
eap7-jboss-server-migration-cli-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 9c81b3d558d8baaba3e860649b5838efc82d16ee51df89bb156ac7590ab959ec
eap7-jboss-server-migration-core-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 50bb0146c2ae6539787daed9fcf4f781b8ca26feb7d26b9ed77c08dc4d164932
eap7-jboss-server-migration-eap6.4-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: e5daf39b30abb9ede5941c309a7bdd293081429941171c20d59521ff392e58c4
eap7-jboss-server-migration-eap6.4-to-eap7.3-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 906fb09ccfbc7ad15b38363caa3d0676b169dce7a29d59b07b0b57c854872ef7
eap7-jboss-server-migration-eap7.0-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 13d614915f73b42c2e8c3ab1d4b9ad7ad9e56813265b94d4b83d2665151e4c70
eap7-jboss-server-migration-eap7.1-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 664629800cee59a5bbbd6976f66010f5f6b7db29030b9cb9583647d0470fc72f
eap7-jboss-server-migration-eap7.2-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 62c6881102840fe0e2c11da1a4236e2011d20d58e4fe51e930238191d5912a7e
eap7-jboss-server-migration-eap7.2-to-eap7.3-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: ac6fe421268373ddcdd47000c658dedbc6c1136c0967be0dd069d4fa428c62c3
eap7-jboss-server-migration-eap7.3-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 3d0890d0f1a2c724e8e169c0653d7463c34e41034e222386faa983e981226cd1
eap7-jboss-server-migration-wildfly10.0-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 7cf61369b7a00e3c4f61c2e66769746125ad8f5facaeedc41a4d70fc130970bf
eap7-jboss-server-migration-wildfly10.1-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: be80e3c7569dc33222d0d8ab7b70f5477970ef61a49c3ce8e9f5f182c9c3312e
eap7-jboss-server-migration-wildfly11.0-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: f3c921017b12e6b4ec89429d0acc1ab508a02e58386721ee010a095f64f957aa
eap7-jboss-server-migration-wildfly12.0-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 9eac72d801633c703be5cf4d58b53b8cc725023361400aafaad933dab29e4221
eap7-jboss-server-migration-wildfly13.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: d7f81571e14090030b38df02484f9e1f7c1299e4efb7763eb9039c2a32322d99
eap7-jboss-server-migration-wildfly14.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 531d178c6652146bf95f4a53bffe928b0b760d51e31dff3cb3284813e3024450
eap7-jboss-server-migration-wildfly15.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: d79442165aee7283e6fd9e9e57ee14c486419a14f0eb5f1d45e20666d0f602c9
eap7-jboss-server-migration-wildfly16.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 20bdfacd1ce762108134cada13db4d0741940caf6e0971e10ecbc1070d73fe83
eap7-jboss-server-migration-wildfly17.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 5149e62abc4baa30037c3336eedb42f620f0c2d424cfae76a0b051496a70702e
eap7-jboss-server-migration-wildfly18.0-server-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 8a02d0abd37965c8cc05d31b677d811422b71e20e6c4c88308e209f3e8cca0ae
eap7-jboss-server-migration-wildfly8.2-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: c327c8de7434e0705575ad41521c22c57755215ff5cb0bf0d04e851130a3ea3b
eap7-jboss-server-migration-wildfly9.0-1.7.1-7.Final_redhat_00009.1.el6eap.noarch.rpm SHA-256: 154917aba14aac5e8b314a36376971fefdc2a531604fc2d3f3575b3cc65a7dd5
eap7-jboss-xnio-base-3.7.8-1.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: df1b6cffe722c041ff7ea54d1e6d0ac744693c5425f2516e3f7e1fa5b071f60f
eap7-netty-4.1.48-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 731199b4da963d479767fd00ed8dee8c85b6a99dd3e55b5e40cce88eca25caf4
eap7-netty-all-4.1.48-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 7a02e2a05fe96ad6ba990c09f00938e26c5ec3a2d60f1afdcf3f6c35c3a54bd7
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el6eap.noarch.rpm SHA-256: c68830efe635bcc2e23059b896b2125d5271eaac26aea22925b2621f5729c6cb
eap7-undertow-server-1.6.2-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: b278b9e2d9397419036e087f106d9a6b9732ed5f3274764eb8e7d742949fa14b
eap7-wildfly-7.3.2-4.GA_redhat_00002.1.el6eap.noarch.rpm SHA-256: d547bf4a98c7af0c403091d79d267c568464cf2384af117ecfad9527aabdfaf5
eap7-wildfly-common-1.5.2-1.Final_redhat_00002.1.el6eap.noarch.rpm SHA-256: fb0b4ce894c7c2d1b5b5b974046aa02b7bb1706fbca518fd985fb2f09b7ecaf2
eap7-wildfly-elytron-1.10.7-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: caf130d7aef481f2dd30d14b06aa4405cfe3f8ed4d3bae4255a1805b2edd5deb
eap7-wildfly-elytron-tool-1.10.7-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 55c8918148b5b8fe35656dd68e48c01fcb8018964ee466511bb66822ce841daf
eap7-wildfly-http-client-common-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 64af9d712c1b8a2dfe56c730b7fb52d6e70cc4e8a60e13ba02c577769be33a6c
eap7-wildfly-http-ejb-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 1106629a536394048f3b8455cfa20560cb4f35b33521fbbb6997e6e2809dde61
eap7-wildfly-http-naming-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a8b32a998d9d3a52a2f4b3fb88fff4e270c10e1719e4f00f8491ef23594ff955
eap7-wildfly-http-transaction-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 7277f94b07e3ac2d86c14c231497a5ccb0a6ceacf7a30ca56fdfee2c416c8e6c
eap7-wildfly-javadocs-7.3.2-4.GA_redhat_00002.1.el6eap.noarch.rpm SHA-256: be43c43f9e729ba4dbf044dc881e22755348c5244216f5a6311ec579b801e230
eap7-wildfly-modules-7.3.2-4.GA_redhat_00002.1.el6eap.noarch.rpm SHA-256: 1d2e2a05559ed10a66e525f397e9d210ab8dd73011d62cf8823de397dc3d9e78

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.